Analysis
-
max time kernel
140s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12-09-2024 11:11
General
-
Target
dc3a30900be76442505ce3191d147f60_JaffaCakes118.exe
-
Size
336KB
-
MD5
dc3a30900be76442505ce3191d147f60
-
SHA1
169cde18cd371d3e2013a0cabe418d08ca0d07ed
-
SHA256
73976ae5353c96d2813bc9078ee49533aeccccf28c80239dd52d57f30c845b24
-
SHA512
f009d4f2cb2be15e6bb2bb18725200a79ccc3e8a42db03737d80020d340109f97ed6966b7757737691a1554a4fd32d0d01ac7ef4d4ffe231dfd05b18b0c5fcf0
-
SSDEEP
6144:zSXTREeT1FjHCxgZkx1H6u2oaXkvUkCW8m6Rm7HpzB9mMTstWf3F+D0g:W3T1xHzshvgZY1zBkMTst2g
Score
10/10
Malware Config
Signatures
-
ModiLoader, DBatLoader
ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.
-
ModiLoader Second Stage 8 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\dc3a30900be76442505ce3191d147f60_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\dc3a30900be76442505ce3191d147f60_JaffaCakes118.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
364KB
-
Filesize
364KB